The package includes tests, a changelog, release notes, and a matching repository, while its dependencies remain small. The single-maintainer project has no security scanning, and both workflow action references are unpinned.
68%
Total Score
50
100
94
63
A post-autoload-dump install-time script is present. This is an additional installation behavior to review, but it is not severe on its own.
One registry maintainer is consistent with the repository being owned by the same individual, but it leaves a thin maintenance base if that maintainer becomes unavailable.
The registry namespace and repository belong to the same individual account, so ownership is coherent, but there is no organization backing to broaden maintenance capacity.
The repository recorded zero commits and zero active maintainers over the last three months, which is a meaningful maintenance concern despite the release being recent.
There is one open issue and one open pull request, but no issues or pull requests were opened or merged during the last month; this provides limited evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0 || ^11.0 || ^12.0 | ^13.0 | — | — |
illuminate/database Version ^10.0 || ^11.0 || ^12.0 | ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.